The human beings are stepping into the information society. The information industry develops very rapidly, so do the hackers, trick-playing teens, exploring children, fraudsters, and serious white-collar criminals. Thus, information security becomes an impending important issue.

人類步入信息社會。信息產業的發展非常迅速，黑客，特技播放的青少年，探索兒童，騙子，和嚴重的白領罪犯也是一樣。因此，信息安全成為一個迫在眉睫的重要問題。

In case of information breach, the victims－government department, an organization or an institution, or a company will inevitably suffer great or small loss. Government may be threatened with national security. Companies may lose opportunities to develop new projects. And the public’s and users’ confidence will be damaged.

一旦信息被打破，受害者——政府部門，組織或機構，或大或小的公司將不可避免地遭受損失。政府可能會威脅到國家安全。公司可能會失去開發新項目的機會。與公眾和用戶的信心將被損壞。

Then how to deal with this issue? Technology is only a partial solution to information security. What’s more important is that organizations and companies should promote the awareness on information security to its staff. However, since no system can ever be 100 percent secure, a prevention-only approach to information security management is not enough. Companies and organizations should adopt a dual approach to information security management by combing prevention and detection techniques

那么如何處理這個問題？技術只是解決信息安全的一部分。更重要的是組織和公司應促進其工作人員的信息安全意識。然而，由于沒有系統能百分之百的安全，只有一個保護信息安全管理的方法是不夠的。公司和組織應該通過預防和檢測技術相結合采取一個信息安全管理的二元的方法。